Read the docs

Portkey-AI

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Portkey-AI records in CISA KEV

No Portkey-AI vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-74160 CVE-2026-110719 · GHSA-h36v-27jx-93r3

Server-side request forgery in Portkey AI Gateway

Priority MEDIUM 64

Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to reach loopback and Docker host services because isValidCustomHost trusts localhost-st…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00364 Published 2026-10-14 No fix listed CWE-918
TI-2026-56735 CVE-2026-82270 · GHSA-rv66-rgwx-xfrj

Portkey AI Gateway Server-Side Request Forgery via /v1/proxy/*

Priority MEDIUM 44

Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/* route that lacks requestValidator middleware.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00482 Published 2026-08-28 No fix listed CWE-918
Open these records in search →